Warning: Permanently added '[localhost]:30756' (ECDSA) to the list of known hosts. 2025/06/16 06:01:55 fuzzer started 2025/06/16 06:01:55 dialing manager at localhost:42061 syzkaller login: [ 99.946264] cgroup: Unknown subsys name 'net' [ 100.034528] cgroup: Unknown subsys name 'cpuset' [ 100.051548] cgroup: Unknown subsys name 'rlimit' 2025/06/16 06:02:15 syscalls: 2214 2025/06/16 06:02:15 code coverage: enabled 2025/06/16 06:02:15 comparison tracing: enabled 2025/06/16 06:02:15 extra coverage: enabled 2025/06/16 06:02:15 setuid sandbox: enabled 2025/06/16 06:02:15 namespace sandbox: enabled 2025/06/16 06:02:15 Android sandbox: enabled 2025/06/16 06:02:15 fault injection: enabled 2025/06/16 06:02:15 leak checking: enabled 2025/06/16 06:02:15 net packet injection: enabled 2025/06/16 06:02:15 net device setup: enabled 2025/06/16 06:02:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/16 06:02:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/16 06:02:15 USB emulation: enabled 2025/06/16 06:02:15 hci packet injection: enabled 2025/06/16 06:02:15 wifi device emulation: enabled 2025/06/16 06:02:15 802.15.4 emulation: enabled 2025/06/16 06:02:15 fetching corpus: 0, signal 0/0 (executing program) 2025/06/16 06:02:18 starting 8 fuzzer processes 06:02:18 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64004014}, 0x4000814) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x884) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6335}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) r7 = open_tree(r0, &(0x7f00000006c0)='./file0\x00', 0x88000) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000700)={0x0, 0x3, 0x67da, 0x800}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000040) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000009c0)={0x9}, 0x4) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64000040}, 0x4000801) 06:02:18 executing program 1: readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/24, 0x18) connect(0xffffffffffffffff, &(0x7f0000000080)=@phonet={0x23, 0x0, 0x7, 0x3f}, 0x80) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/77, 0x4d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r1, 0x4) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000200)) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000280)={&(0x7f0000000240)=""/27, 0x1b, 0x7f, 0x7}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x88) mkdirat(r3, &(0x7f00000002c0)='./file0\x00', 0x20) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000300)=@req3={0x80, 0x5, 0x2, 0x9d, 0x1, 0x9f1, 0xa72}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x1, 0x7fffffff, 0x4}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x25, 0x8, 0xef, 0x3f, 0x2, 0x3, 0x12e, 0x33a, 0x40, 0x203, 0x7, 0x0, 0x38, 0x1, 0xfffc, 0x6, 0x1}, [{0x6474e553, 0x10000, 0x5, 0xcdf, 0x7, 0x8, 0x8001, 0x6}], "285d4cb3efc9e692ed0c2cc3a8e60e20b9d51bb3b56aa57b8fd831ea9eb684d7fdebf38a47cda16fbd33e5bca37a3b0229", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a9) lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ec0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000001040)=0xc) stat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='system.posix_acl_access\x00', &(0x7f0000001140)={{}, {}, [{0x2, 0x0, r6}], {0x4, 0x3}, [{0x8, 0x4, r5}, {0x8, 0x3, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r5}, {0x8, 0x4, r5}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x6, r9}, {0x8, 0x0, r10}, {0x8, 0x1, r5}], {0x10, 0x5}, {0x20, 0x5}}, 0x74, 0x3) 06:02:18 executing program 2: mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x9) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x0, 0x4, 0x6}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@private=0xa010100, @multicast2, 0x1, 0x6, [@broadcast, @empty, @broadcast, @empty, @loopback, @empty]}, 0x28) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r1 = signalfd(r0, &(0x7f0000000100)={[0x5200]}, 0x8) ioctl$TIOCCONS(r1, 0x541d) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000140)) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000180)={0x3, 0x200, 0x2, 0x7fffffff, 0x101, 0x6, 0xf360, 0x8, 0x10001, 0x8001, 0x950e, 0x8, 0x4, 0x800}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x0, 0x7fff, 0x10000, 0x20, 0x3, 0x4}, {0x9, 0x1f, 0x7, 0x40, 0x7, 0x8}], ['\x00', '\x00', '\x00', '\x00']}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x600002, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000003c0)=""/3) ioctl$KDADDIO(r2, 0x4b34, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x80000000, 0x6, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x65, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010101, {[@end, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)=@getsadinfo={0x214, 0x23, 0x100, 0x70bd27, 0x25dfdbfc, 0x0, [@XFRMA_SET_MARK={0x8}, @algo_auth={0x144, 0x1, {{'xcbc(tea-generic)\x00'}, 0x7e0, "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"}}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x4e24, 0x99, 0x2, 0x4d0f12328604b572, 0x80, 0x3c, r3, 0xee00}, {0x1, 0x2, 0x923, 0x10001, 0x1, 0x4, 0x3, 0x2}, {0xb0, 0x84, 0x6, 0x4}, 0x7ff, 0x0, 0x2, 0x0, 0x2, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, r3}]}, 0x214}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = creat(&(0x7f0000000880)='./file0\x00', 0x40) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x1, 0xffffffff, 0x6, 0x8}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40030}, 0xc040) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000a40)={0x210, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa5f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa2f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6d3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb874}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x29}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf39}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x24000004}, 0x40) 06:02:18 executing program 3: getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='team_slave_1\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x410402, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000001c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000600)) recvmsg$unix(r0, &(0x7f0000000d80)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/234, 0xea}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/138, 0x8a}, {&(0x7f00000008c0)=""/164, 0xa4}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/54, 0x36}, {&(0x7f0000000ac0)=""/162, 0xa2}, {&(0x7f0000000b80)=""/2, 0x2}], 0x8, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}, 0x40) ioctl$FICLONE(r1, 0x40049409, r2) r7 = accept$packet(r6, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e00)=0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000e40)={0x8, 'team_slave_0\x00', {'bridge_slave_1\x00'}, 0x800}) getsockname$packet(r6, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001500)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000015c0)={'ip6_vti0\x00', &(0x7f0000001540)={'ip6tnl0\x00', r8, 0x4, 0x1f, 0x6, 0x200, 0x51, @dev={0xfe, 0x80, '\x00', 0xf}, @remote, 0x10, 0x8000, 0x1ff, 0x1}}) ioctl$FIOCLEX(r5, 0x5451) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/kernel/profiling', 0x200, 0x125) ioctl$CDROM_CLEAR_OPTIONS(r9, 0x5321, 0x9) r10 = open$dir(&(0x7f0000001640)='./file0\x00', 0x420000, 0xcd) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000001680)={{r10}, 0x6, 0x5, 0x6}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x240000c0) [ 123.105276] audit: type=1400 audit(1750053738.671:7): avc: denied { execmem } for pid=279 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:02:18 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b4d8a99bea59"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000844}, 0x1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000280)='geneve0\x00') sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x80) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000003c0)={0x0, 0x919, "8c77cc", 0x4, 0x73}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000400)) recvmsg(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f0000000740)=""/43, 0x2b}, {&(0x7f0000000780)=""/17, 0x11}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/181, 0xb5}], 0x9}, 0x30) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002c00)={&(0x7f00000029c0)={0x240, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x904}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc1dc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24af}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdfaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9cc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x188}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7, @empty, 0x3ff}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000002c80)={@in6={{0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}}, 0x0, 0x0, 0x34, 0x0, "a45be78b5a945bbb0467e8ed7973c0efd6c65ed1a2cbaf5241e1b6fa41d7bdca436ec6f58ceff273551f1b43bc1f8d62d8f5b60213ac0213f76750f15ce623de4b83fc2dc0a2aefd886212f5908a6eb9"}, 0xd8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002d80)={r1, 0x3ff, 0x7, 0x6}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000003280)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003240)={&(0x7f0000002e00)={0x434, 0x3f4, 0x400, 0x70bd27, 0x25dfdbfe, {0x4, 0x1, 0x17, [0x7, 0x2da, 0x200, 0x3, 0x401, 0xff, 0x5, 0x4, 0x4, 0x9, 0x8001, 0x0, 0x3ff, 0x400, 0xe3, 0xfff, 0x85af, 0x3, 0x3f, 0x9, 0x7, 0x3, 0x7e, 0x4b8cba6d, 0x7, 0xda, 0x7, 0xab4a, 0x68d4, 0x6, 0x7, 0x200, 0x1, 0x200, 0xdc4189, 0x2, 0x8, 0xe420, 0x20, 0xffffffff, 0x0, 0x4c4bea28, 0xfffffffb, 0x8, 0x1, 0xffffff23, 0x0, 0x6, 0x10000, 0x400, 0x3, 0xffffff5d, 0xffffffa0, 0x5, 0xb0000, 0x8, 0x4, 0x2, 0x6, 0x1, 0xfffffffb, 0x8, 0x7, 0x43f8], [0x7, 0x1, 0x3, 0x78, 0xffffffff, 0x1, 0x6, 0x800, 0x9, 0x1, 0x3, 0x3, 0x3, 0x80, 0x5, 0x20, 0x7, 0x8000, 0x22e, 0x81, 0xfffffffe, 0x4, 0x400, 0x20, 0x2215517a, 0x5380, 0x135a0000, 0x311, 0x3, 0x6, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3, 0x8, 0xff, 0x772, 0xcf98, 0x10001, 0x1a, 0x40, 0x10000, 0x9, 0x8000, 0x6, 0x80, 0x3, 0x1, 0xfffff000, 0x6, 0x2, 0xfffff102, 0x1, 0xfd8c, 0x5, 0x7e77, 0x8000, 0x10001, 0x8, 0x3, 0x3, 0x7fffffff], [0xffffffff, 0x0, 0x6, 0x4, 0x7, 0x3, 0x10000, 0xfffffff9, 0xc69d, 0x949, 0x101, 0x31f3, 0x9, 0xffff0000, 0x7fffffff, 0x4, 0x3, 0x10000, 0x80000000, 0x80, 0x3, 0x800, 0x8, 0x100, 0x6, 0x80000000, 0x8, 0x3, 0x7, 0x4000000, 0x6fb, 0x4, 0x7, 0x400, 0x0, 0x30, 0xcea6, 0xffffffff, 0x3, 0x1, 0x1000, 0xbdc, 0xef, 0x1, 0x2, 0x1, 0x2, 0x6, 0x6, 0xde2a, 0x0, 0xffffa86f, 0x43, 0x95e3, 0xfffffffa, 0xe0000, 0xcbb, 0x200, 0x4, 0x2, 0x0, 0x22, 0x81], [0x10000, 0x200, 0x7bb, 0x1, 0x7, 0x1000, 0x9, 0xe98, 0x3, 0x7, 0x101, 0x8, 0x8, 0x7, 0x1, 0x3, 0x3, 0x1ff, 0x0, 0x8000, 0x4, 0x0, 0x3, 0x3f, 0xf40, 0xffffb605, 0x800, 0x20, 0x2, 0x5, 0x3e0000, 0x8, 0x1, 0x101, 0x1, 0x10000, 0x5, 0x10000, 0x1, 0x6, 0x9, 0x81, 0x9, 0x6, 0x2, 0x1, 0x101, 0x7, 0xfc000000, 0x8000, 0xfffffff8, 0xfffffff7, 0x81, 0xa2, 0xff, 0x101, 0x3, 0x0, 0x4, 0x3, 0x100, 0x8000, 0x3, 0x4ce43bf], 0x12, ['\x00', '\'\x00', '{;#\x00', '\x00', '%5\x00', '\x00', '){-L#\x00']}, ["", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003300), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x2c, r3, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xb, 0x32}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x24, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x6000c040) r4 = openat(r2, &(0x7f0000003600)='./file0\x00', 0x10000, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000003bc0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003b80)={&(0x7f00000039c0)={0x1a4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x24004001}, 0x24008001) 06:02:18 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0xee, 0x0, 0x2, 0x0, 0x7, 0x40021, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20}, 0x10000, 0x7, 0xafe, 0x8, 0x1ff, 0x1a, 0x8, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x45, 0x8, 0x6, 0x3, 0x0, 0xd7d9, 0x12001, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3b, 0x1, @perf_config_ext={0x1f, 0x8}, 0x1002e, 0xf683, 0x80, 0x8, 0x1, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, r0, 0x1a) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)={0x1, 0x0, [0x0]}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000180)=0x8001) ioctl$CDROMREADCOOKED(0xffffffffffffffff, 0x5315, &(0x7f00000001c0)) preadv2(r1, &(0x7f0000001000)=[{&(0x7f0000000c40)=""/214, 0xd6}, {&(0x7f0000000d40)=""/72, 0x48}, {&(0x7f0000000dc0)=""/135, 0x87}, {&(0x7f0000000e80)=""/222, 0xde}, {&(0x7f0000000f80)=""/111, 0x6f}], 0x5, 0x1, 0x7, 0x11) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x240081, 0x10, 0x2}, 0x18) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000011c0)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x7, 0x7, 0x81, 0x1, 0x100], 0x3, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40024}, 0x4008001) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000001380)={0x5, {{0xa, 0x4e21, 0x4e, @private2, 0x9}}}, 0x88) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x400d) execve(&(0x7f0000001540)='./file0\x00', &(0x7f0000001640)=[&(0x7f0000001580)=':.%#j-:(}\xda((#[\x00', &(0x7f00000015c0)='\x00', &(0x7f0000001600)='-\x00'], &(0x7f0000001740)=[&(0x7f0000001680)='nat\x00', &(0x7f00000016c0)='[--^\x00', &(0x7f0000001700)='\x00']) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000001780)={0x1000, 0x3f}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000017c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000001800)=@qipcrtr, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001880)=""/209, 0xd1}, {&(0x7f0000001980)=""/101, 0x65}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/2, 0x2}, {&(0x7f0000002a40)=""/42, 0x2a}], 0x5}, 0x80000000}, {{&(0x7f0000002b00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002b80)=""/195, 0xc3}], 0x1, &(0x7f0000002cc0)=""/120, 0x78}, 0x5}, {{&(0x7f0000002d40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/111, 0x6f}, {&(0x7f0000002e40)}, {&(0x7f0000002e80)=""/55, 0x37}, {&(0x7f0000002ec0)=""/96, 0x60}, {&(0x7f0000002f40)=""/130, 0x82}, {&(0x7f0000003000)=""/52, 0x34}], 0x6, &(0x7f00000030c0)=""/209, 0xd1}, 0x2}, {{&(0x7f00000031c0)=@nl, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003240)=""/110, 0x6e}, {&(0x7f00000032c0)=""/92, 0x5c}, {&(0x7f0000003340)=""/148, 0x94}, {&(0x7f0000003400)=""/15, 0xf}, {&(0x7f0000003440)=""/197, 0xc5}, {&(0x7f0000003540)}, {&(0x7f0000003580)=""/54, 0x36}], 0x7, &(0x7f0000003640)=""/154, 0x9a}, 0x3}], 0x4, 0x2002, &(0x7f0000003800)={0x77359400}) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000003840)={{0xa, 0x4e24, 0x2c35, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3c1264e0}, {0xa, 0x4e24, 0x2, @private2, 0x1}, 0xff, [0x3, 0xffff, 0x4, 0x6, 0xcb3e, 0x7, 0x0, 0x9]}, 0x5c) r4 = socket(0x28, 0x1, 0x9) getsockopt$inet_udp_int(r4, 0x11, 0xb, &(0x7f00000038c0), &(0x7f0000003900)=0x4) 06:02:18 executing program 6: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x1cc) r1 = syz_io_uring_setup(0x538b, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x2, 0x15b, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000001600)={{'\x00', 0x3}, {0x81}, 0x151, 0x0, 0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)="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", 0x1de, 0x0, &(0x7f0000000440)={0x2, 0x1ae, {0x0, 0xc, 0xd6, "d36955c3ef70bacdaffe941fdf2a7dd99a3324d516f11503d50b9711a1d296fe31f2ba6fa776fe0fce729c7ac67945601b91bcbaea7ca465f1d59aec63c9f4a8d45d496d202b21bdccb8f87eec9d340873d37d3f8d4baf2368eaea964c2f488ff45ebb2aefd0f3e3c262bc99cb13053733de85c351038a10ee4376d62b1999b28c5e4cccdd73b8e0b8234b9446fcd2633041bc67349b28501ad4f5393d2db71727cb6cbb4b57641a9b777f825604b61a9ed082b8c88a18557264985ccd3e59236263c7cb69a1b1e216b50744efb23523198242f410c2", 0xcb, "91b918e87bb3c63c710f74ed15e2b8125eb93cb855677725d72b5f68b71b5b56e1555a0493098d8875557d6fce97d216ee9e9bc91a8cce385aa5f71870b2601b99ed7143cbc37b78263ad0f05ebad6a4fda19113f10edba8f01fa2c5fbd84c93a50a568891c72c1e7abfd1091870ca08c59645b8485f2dd697359a13cfbceafaac4150caff4458345eed45d528cee67e3d39b465b3cb11120de82ff03e42d72e39257b13467e36556e3188ca6486cf3127196c2f5e4a22e263899041cf77b3dc1d656c33ac8cbe9e3b55a9"}, 0x1000, "3fa8f780ec5d822fc37181a67e1cfbf051d13f5e82d949626fa7a664b806319e57fd1824fae291cbfedf6e88506ca2b41b82016af5b31435a93115812f0053b845966c950467a3ac35c6d1ccdbed2546e3d9a5916874f9544d97c2d573f96b0cd9434e72cfc20839dab3e32c41523af4666e31f0a9e5298bd061ca5248e0e0b66f19cc8c33a5f2f1c16ef564e4bc8791758135a885a89aaad44a6eaf59adcb26bf9f2c541552857ae7dfa1dac1e7ec824cbfcb97a2f7f682f4350140edf889838a899af941612ff47c1ef26883c35cc63dd1bb8ad44a553849ca4305c858d7673d52a6a1d59f428d8cdf51e72aec734709ebc107c105cff953f3f63facf7b06cf1347f9516e459d0e0943171b8953693be6210e26b83a9b2775265e061a90ccbe33493a11b1ca45c67a7db84e97b57352868ec5c9bd00eaa65b16ccdd41c4a166cfb3a25b689fa11070d62573e9734eee095b0418a3da5d0634cee9d3897397dabfe741c10eacafd0b673693572cc2f6242fb6b20a2c8f4792fe1547f30dbbdba64884e6f7eed4dbc1f37b4c943df1a2d63baa85a51c20a5b7fedf05d8d1d16a4a88e0efe53efe0121fa229a0fc265e682168082af1ae58e086f54f65830b6845462ae69336b1283512c90a63706693ce3a622876a852cf370f5442d387321169ce2cf5d1be83c6314f1ba62a88d53b0b3d1f7b0f85d310ab9ab5a11b83405e41212b1574c7a4e2f262a8b2cdabfc66c57ebe1c0e5e1e39d2915f31fb78ebe04793d9f4996d03674c38a604e0f52e74fa3126db81d2e632293bd160d0db4e0dd055a8f05c8ca2f58cd4714f55d15ecc1c94919a091e93586cfa548b80086a77396d7159d9e0d6c6841e5f36cba33888a4eea5cf6f6594c3aa5b1cbee9989ca19f43d53b0959bf88e26008666b396c1d65ea8b27a9a0c237e0dd675ab4de7f5363942d0afed48c9556c89cabbf2fe18b543ef194863de924c99e3cf95937bcf3e2ad0884f44b753c042eb9c964892251cf38653574f5cf7e2e51b7fd88718bcd856af32562c5c76ed61665928eac0059798d28b5406b69211ae83a1141073b3134fdf260d037dd818e95a851bf9a5b651a3dda9534e43fc4265276a7825634350f5f1e4232215d560bb1b7e76e21354fcd635c77494eb09803e069028a6e7b925a149b443585fbbef02e4a541f980fce9c9c661510b98c4824cc487c1ed0e82ddf648df2f84eaba161a0017014d371965d6a6ba802047bfe4bba6c55415c6ff6cbfe28b77139ab6b4e18136b56af0bef382e09aee80a3465d4092ce5b83feac2ed298cd6903941d2b8b702eb34281d6d5ccea835bec92182ca25a2602532b7cc3b3b70c2a332ddc9eb3cf7726c15571f46ee083927cd4fee6be573390a3046ecc64786c4b452338b8d56067131678bb92130135d8734d012eeb416b31f9bb2a501f79c1709304b7b40bd01db1d6755a3529cf62d527e90ce0883e51dd4caf2a0bb45146dcbf60c64d6ff6cea27e8ea026f618794fa84f084655ff49b6ea032af1dea592e35dd04f1e71f86938b6fa976df699faaca18a6a759a5cf65e75fe640efc7a1daecb59c7eaadd7f16181b37adac9d809c5106887e32c0e1fce8f0c3c93a376f0505156bb836f1bf4d5a7fd15a27e2d9aa8a676bd4a72f78e43694acec44d11e663b9b0fc14a455882c716fbf7577eb395e52391bedd0d4282e39e9f56cade287216859fa5a1295c6e136dbb6caae10ae02848067824f7fbe10b08b6e6631c191182e746325e745bee72665dacc7417f2075769a2468e4a0cb4fb0baef4d5e4b023213ca36eb8b6fc5e3012716e4039c1244e26505098db65b02ca5b48406b11fa68d7ba94ecc25d5997072cb1d9107a99539b643ac69eecf55ba3a67f6d6296fa6ab1f3d69adaf283377f09ac2c369fa9899f0e2fea1130c7aab690ee74d1ca6fd2a79a353cf2078ef032c5008eba5ce6cf1c89c2d12174f16c5c40470cbaefb2cdae6c943ffaa8402e1e40812c86aea843c5bd6f98aff449bbd6122b7eb3370f3086165bf2f173888c46534988aaf62f1fb7d3248d92c16753af44db6be561bbd490d5035ede8d67665534fcb136763a768283eb501d7eadca7354776ad3988c19d3a354903863528016e7ff047ccb012bb75d1a3b8b5a141e5d293ac654180f69b75942db6bdfe4e36d1e17bde583f9cb53a6946c8deb9508aacd524254c63f4522bc404200f0226059e99226589449b7a8c6168a6ffb5799ddf3e2f95fe52eeb9716e180cd002e5cd76cd7bf70c01e3f3ad4d29ab18e122efa240ba3b85d98d9d51a4edcebfc4e3ef069f37b6aff1cee6365a2c9120fec49f2e38045a32828eccb8150b23e1bacea465ebfb8945fda37be22d1f4348616f060bd5e7b85b4e47558c7948f2f337fa9655ce1850e5df127d72d6001c2575ae8729743013a85d2e4ac368df20ca8d9829b5ce168ec81c2c26d1f17d430db66583a1e6f34104b8b4fe24abadd1f6ad92d9bcd8c6a348e22e375a84a74192c99e73d033cc022d2f6ac2b88a76f840e112b0a5480b989fa0d32fb6626502dfeb38382b3e8e5d657aa8f6b0947cdc8fbfef2c40778335d44fe775b9ad1484df20b2b27404cbe4f6a2720fddb148ad64e6dbde78acb2468805aa585cb7fd631985fef07c6aa25fa72f231f971b05dfa8771134601080f3fdaa28b4eea23cc9336ff188a48ba5e8d5557f498f85265167ba6f376a4bc90b03c8bb440f647efaf23674080c5cc124f9eba9c3b84cdace6c7bd85fa1ce9951b2f4e737378a1b5bfe6de363a43c1c35f7e3098c21c6a621941579dbd73160d5e1144ef6e7f07bf770e0535d2d259ac589f4f613ef14f127c810974a8bb4af5d2c88f410d51d36ad15926af3fb74c3f9143beb909d1ab3bf7a1a8e04a768bd7b651f2be8f50063a20fb61b06fd5b0761b45ce9e080ec504dd856518b87f752f6c00de3d135669554c76b672574b725bdbd96ec22aa02b19ab908222131654c9894095ee8e18169fd4ea5ccae722512f4c77ea11fec896eba6167bcd0d2f849fa9f44e55d89dde4e498f801be0a8536cd56f2fc5378f3c34ccb5a758f22c6f02f2c71d00baaf82b2606e0584e759ae1c85ef2822cb328714ffdd704ebd68753ce26dcdf5710e1f7f3af8e6b7b9f5b0a1e2b409139dc2458da20e15de903dcf3cb27c6c940e64d58c71f58b4a713db8c92576fe0070cf2135cb13e85b84829afdfc32d6fd9410f583a893716a320736c0aac74dd80891e1029e41028c0c214c5a9d926b95e669e36d93428a1b878d87b65d8936aee50d5202e2fa7dfd0d514e9cf7de083bbd2fd305e033dd9f3727a3956ae750c077de3388b01594424fd3a5a6da0ebce47a751434363587bf254fe687ac7fecb16735779aadf615671f77dbeb1949aae5882528b4ea69a9fe80e6155af75483b95f105b973a4872442368dba0b1c3d67b6018c77a26d7e0dea94eeaae7d29f81aebcf2a5900de2bed0fb28e16acd084adee4b08b8ad5fbc8815678e6fbfd49fc767316c0a06bc1c3cb8b204e07c953f47fdb19ee8c4a116a0174a8c4c821a60f59c50d9ebf828e8f1ef3dce78f5b13b4f06c8aed0592264791150a4ea8cb6cf028261bddc4b66297b771b9c41ffe94ac140aa57a0e97c874cdfcde49bc8ce3b3da240dbfcaefae0378ead8ae5d79278a51decbcc900e82040df66fd973c374f473d0c325f96e9b8865a821d865dea385e125b3904e1d6c4c4098c1346fa88b7b6b615b10bd5df25c235a127acd99f2e6c117d6f98860fb6754ccfedf720e7e7a2f45d2a063a4f82627df615716bc581970fc865981de0bad98f95b4b77a1086011b8b22631aa8f9f3e50e0863ff13088622f26f0f435da9030f60d1ca8e86e283768536bedf291cb9a799f728640e2a6855457fb59986c80cd50c2eda5fac5a76d729e65b9e6c0a18dc765d8f03af1b1ba51f134a59fdadd05b9d5a44581de3f6718dddaeadc97111d1969d87484aac401091e0f8d5321dd37127bd8f06090cd8839637f9af0f4b277a9efa97082552399287cd5de23a3561654766b06cd5a2e9644f2287ecf943b4d36a64f9ca1334d358228feae31843fa8d9152c84dabc230fff35dd755e462c0f555d6a0d9662e9e209973445e6ffaad4fcd677536104e137963805293040cb3c68b6cd5d5391394d2c7630a4a17eec98a218b7068cc860965334125bda2330aad354c8eb636f500762fcf58a892682f43db85b4e3dbc47fbb9a9d1cf558c4b87aeb4bfb04297c7aa8af4a112889279dafbcf4ee8ce7b78988b0ecaa0e0bdafb65b0bcd09e3617ba8faea40d237f4aa367b724daa90bba06dadf78241875eabd92d9a40724eccbd2418a468afe6a5196795ff64d6be80203718cabe7a4e16ec69576183a1445510a8a127efc9ac5af626206eb8ca1692afe9a7c63b576db3c24af33b05c619814a9a2131f8bba416265157844e1a09915b735160edb410c83cb0629e352b1986d02eb47a44743dd21429ed9e1af6f0493d0df0c96224f3ea7794adaa33f17bec55c00363c913ac354dc2ac422a91d147050911526f9f3f2ae494ba7b7e96aa11aa854ae4822fc72764c86b07c37177dedbb16273ba537de64add06b886f440247e5ed2b33232cabde018868d26cd2ebdc60c7d2a58460aaeb9593b53e60b40e7ec741fe58fa9ac8e56a812a6826e124372345b201ceb62d732fb1702b13eda181dd0949decb81b178fa1e7494229e17704257884925a40b23f92070886a5b96506758e142356e7cee33d2b44067d67ebc3834707e1d68a4de8be8cf85ff2bcc74c00dbdb6bdb314bb87b1f988187a559e96378fb1cd552b6343fba30f9d3c4ce93659160ed40d5eeff4e2c3a8e95bbe60f0a9233143469ef49be18970f9c4c14e2658ac5a885c74900cb0a18b0004baa8299b22be198a8e8828468fbdfcbc41f7c87320f00a0247fd2bdaae7ff5952ce20aabb2759e076f436b925d61559d460c1e54997b8a15227ba46b37d0be8f8225c1496d7dd637296fa49cf54ea795f680af382aecefac5f7465c72f35a72d4a07e40a9314069cddc3829fcdb92e6de634ad53051aba512e4cb70b37250effb2213d779666d4144679f3d55a6fa84c0a8218e1919961aedba8d3a6256f0542131fd928359b4041396853e48f94ee9dfe294bd6d87da19ca34846430d9a2efad5d35faf85d1df339dc24e516600ad053627d0208e1ab037a6b1eca3f1f06b854e505ab304fdb3b56c25757b0b0dcd2ebcb8fb13282fdc18f5f166a2cd162252ffbfd892cc51c16388a94f40710dfc9829644a3cbaae686afce39da09b715e95d2092cde71fc311696030345bdf1219df23fcd524ff9b97b38a1d245840cd05a2116eb1aeabbbac8bcabc67f1e76f86d44ee25f785feb8998c059a68cf9e5bbc064711b45f14d0e24a98c01d7f08904847f26c8242c61089131a4a431bf4c09c5b914ad49eba4288b5dc1d1283a6691147981e58bab9838ff247f25ca7c74294287b49fb97260a1c8a613c98e4862313b0da61c77120360936a3e97e5cb67612d5216efdd89733df1fd2f9b66e1177d07cb2dca97e415390ac87e0b2f5889eb475887f5869b3cebb6b9fe25d2c5c4bf1e5a5a94c054a6c20a39ff839bb62e43bdae4fd6b81459870f781da3628bc41eed7cfcd96598a04d61f006b38c889784226bfabd9ee87f393de30ef30a038adab7f086242ed55f990069af5d6fe974ceffef2e8f0939340487fd4836bb67dd1a198577f876563083f68c96c77fa2e7"}, 0x11ba}) r2 = syz_open_dev$hiddev(&(0x7f0000001680), 0x48, 0xa8001) fcntl$setlease(r2, 0x400, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000016c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmmsg(r0, &(0x7f0000001b40)=[{{&(0x7f0000001900)=@qipcrtr, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001980)=""/110, 0x6e}], 0x1, &(0x7f0000001a40)=""/245, 0xf5}, 0x6}], 0x1, 0x40000000, &(0x7f0000001b80)={0x77359400}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001bc0)=@req3={0x6, 0x60, 0x6, 0x2, 0xfff, 0x80, 0x1}, 0x1c) chroot(&(0x7f0000001c00)='./file0\x00') ioctl$CDROM_DISC_STATUS(r0, 0x5327) write$P9_RREADLINK(r0, &(0x7f0000001c40)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) name_to_handle_at(r0, &(0x7f0000001c80)='./file0/file0\x00', &(0x7f0000001cc0)=@raw={0xa4, 0x7d, {"5bad4d1311bbdebfbd9cb6740a10b55b58c05f0d4bbb5f998ea0601107fac4649e6774081d8d0c16170fa4be936c690d8a809dd75f6b6a5175fab33f71e0a762abf54e78b75522cb6d0bd4c3ef58fcd2bd2bc215fbf02900ce7a4ee18b16c0621aec430a484bbb32d8384c0900ae17c20cae955cbfbaf7ad96d00677a8f2a7cb28a0fa485f6fb6380368bf289b9690cf2411d97646ec3fb6f882717cafc00d02e170c4fa"}}, &(0x7f0000001d80), 0x1000) r3 = fsmount(r0, 0x1, 0xf2) getsockname$inet(r3, &(0x7f0000001dc0)={0x2, 0x0, @local}, &(0x7f0000001e00)=0x10) fallocate(0xffffffffffffffff, 0x8, 0x7, 0x33) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) write$char_usb(r4, &(0x7f0000001e80)="446e96f49edb35a1b3a3818012d7d1da381a525c0a1bcd1bef5bdb5c153c8f790ee86458746a8e093c8141c900cc3c7b8812f0743d5fe0ce59143e0d266fe38ed54c33999cbfaa1d8b709f005102920d13519239a922895865811a9aac8ac9ef182f5e838715909dbdaa50a7aae7626541aad1afa33a83a4a358d42e37447aeb4e952b5b60703c64c210e942660d0a4af425a79405bb0d2387365af9b0c023", 0x9f) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001fc0)={'syztnl0\x00', &(0x7f0000001f40)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x9, 0x7fff, 0x20, @loopback, @mcast1, 0x10, 0x8000, 0x9ab, 0x9}}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000002000)={r5, 0x1, 0x6, @remote}, 0x10) 06:02:18 executing program 7: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sync_file_range(r0, 0x8, 0x80, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000240)={&(0x7f0000000100), &(0x7f0000000140)=""/232, 0xe8}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280), 0x4) fsetxattr$security_evm(r1, &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x2, "2f6afe7b669737"}, 0x8, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000340)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000400)={0x500, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4ec, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xf3, 0x3, "a2d6fcc7a5ef114fb22e2ec7b52545c3450d53f798c8368c54bc367515ad168b2ddcf191a0b78f04e43b339f8f84d35d93af1baa00f7f82e82520346a3614b3083b30efa4914f68fa68af4f62cfcf4af771060f93f3128bf4b29159d25a8fdd689bf0ae77e3711836e460c9f3a1fd70f01157189dee31ca7d87924fed973fa498c14875e87d7d7e91c1af45e5259b0604a33e0762203a4a6e66bcb412ea8ee610eb8443c2bf7cb60a51601c961b228f27cf4c8629a1a4476bee5c592acb6fae7067263322b12dbb5e7cbb181ee55fe2ec9b3d4051f2988ce436f91e4d9d0ff549d3f988c2977470ccbf24fd0252071"}, @NL80211_BAND_2GHZ={0x7b, 0x0, "c85a97ef9809e11a172931f5d7e6024d677fcb46ac57ba3b52d6fc11b582d95331574fb4e3a6afce3c4cb6a853734c477c1b171ebd4bf25b87dc025f5e6228a3313e7488fc3d0deb2614371a585a4a5711dc460e365116ca08ea688b1dd3574b6dbadf7e3336e9304991ddf6b32f2127443834f20abc9a"}, @NL80211_BAND_60GHZ={0xec, 0x2, "9ff861522d9472cd8a4b52e5997063b97f826d6f9a7e9740970ad38bedb8a8c1586b780fdfcf48e4280b2ee617abfebc930b07ea71ef4d4df9af62decd5f7b79feb825a378066f15fb4d3490af78fbd271f19d02229a821eca8b835b9b1c7d02bc75de0dec03756394a0da3403d393dc9c070915ed004421dcf64a353cf37e44211d1c10ece152fc54f9fc054fdb79bab047d35d1869bb8f9280052579863368e4681952dbaba6bde9bc327fbe55b04ee0882c0ca6e7be53c1521a70e1c9c3accbec933b1f25b462b3c591bb00f5bcb49326439e0d1558e78927ead4acb9ce6144c6e42ecf2bd0d6"}, @NL80211_BAND_60GHZ={0x91, 0x2, "3e87e578475dbc6c0dacfaec0f760cd6ea49abc7ea5dd18cf1297fd2476af04af731793faff05611d0a66c19d025422c207f637f7a659d1cd09b863a6c1ebc706bb6bba1806f9f85593cdb540722958ebb5fb5d23c2fa9bd1862ea1e5760b4561f85617df03726e64c7cb4366c0ba0b18d6d5c4fd4b9a9fb14a61da4ff7ea428310461434cb5f6081d6ac2e6fa"}, @NL80211_BAND_60GHZ={0x56, 0x2, "be0aaebbd46b10620b9f39974aabc3804d14e77091f753c6b5ac24f8ccd0421c4a6118d4d64e81213e36000d7ff8969a107bf408c376573fd81131ae87098554ffb1b5dae95650379a231ac47e085c39f464"}, @NL80211_BAND_2GHZ={0x37, 0x0, "d8e503373e3f6d500bee9d35fcad62c8a33f1406a291b463912d64f915d82790ec44406a0943c06139aa9ead7050b45cc9285c"}, @NL80211_BAND_60GHZ={0xf7, 0x2, "440675f0493c1bdb59246d4fa9595a1d70ee64df0d0eb35840e55c5c857acaba9157acac5321b150435786478e3e0e070e3b4e1db990260c9d98ff8b42eb80dc1775649cc8d5fd3e83757bf43fbe7ec2d01dcc99b3d7c7061c057c036a0cefc9bf6f38413babb1f030ec364ce98970d9532b843eed4675f0cd1236930a997e5aa97c9d092165bfc5e96c9913c3aa7ca6f08deee0a6f3a0fb465c9df39f4133b94d83b357f5190da59ad11d8a82b50b781d67f77e260bf81a0d15044164a58c5d159fb51f0b334782cf600d43c32a79560550bc9ae76cfd30de35dfb1f8efb424690707f18c40e2cec9b89b390a761d7de4090f"}, @NL80211_BAND_6GHZ={0x6f, 0x3, "02961b5723498e4550856bc3110776390a25f062f54a2a2e632b2953fd02ad97591a29033d809dbb7d03bdc797369e2ded9e2bbec940aee960837c8204141bbe3be4c5cf73b75564caa75ccab37d3682aa6fead5eeb36a3ae80155c548a745a873c07226b8fe2db2272f9d"}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x4050}, 0x24048814) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040000}, 0x24008080) read$hiddev(r1, &(0x7f0000000ac0)=""/43, 0x2b) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000b00)={r2, 0x4, 0x0, 0xc59}) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000b40)=0x1) r5 = syz_mount_image$iso9660(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0x2, 0x1, &(0x7f0000000c40)=[{&(0x7f0000000c00)="3bf811267ca692b05f99486ce1f770afd9", 0x11, 0x8}], 0x80020, &(0x7f0000000c80)={[{@nojoliet}, {@check_relaxed}, {@dmode={'dmode', 0x3d, 0x2}}, {@block={'block', 0x3d, 0x800}}, {@hide}, {@gid}, {}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@permit_directio}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x80000000}}]}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000d40), 0xc8040, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000d80)={{r6}, 0xffffffffffff3bed, 0x8d, 0x25a}) [ 124.564629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.574863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.580960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.586241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.592359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.599553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.601898] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.613743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.622560] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.627572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.632982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 124.641609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 124.646570] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 124.686621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 124.694743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.708551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.730781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.762117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.767046] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 124.771838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.773933] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 124.776307] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 124.781287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.788546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 124.800849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.809372] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 124.811432] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.818406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.838488] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.851312] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.870601] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 124.886595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 124.889252] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.890484] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 124.898227] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 124.905577] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 124.914818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.936735] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.955446] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.982549] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 126.698996] Bluetooth: hci0: command tx timeout [ 126.701133] Bluetooth: hci1: command tx timeout [ 126.762424] Bluetooth: hci2: command tx timeout [ 126.826181] Bluetooth: hci3: command tx timeout [ 126.891523] Bluetooth: hci4: command tx timeout [ 126.954165] Bluetooth: hci5: command tx timeout [ 126.955216] Bluetooth: hci7: command tx timeout [ 127.018153] Bluetooth: hci6: command tx timeout [ 128.746352] Bluetooth: hci1: command tx timeout [ 128.746393] Bluetooth: hci0: command tx timeout [ 128.810334] Bluetooth: hci2: command tx timeout [ 128.874193] Bluetooth: hci3: command tx timeout [ 128.939187] Bluetooth: hci4: command tx timeout [ 129.003552] Bluetooth: hci7: command tx timeout [ 129.003725] Bluetooth: hci5: command tx timeout [ 129.067433] Bluetooth: hci6: command tx timeout [ 130.794184] Bluetooth: hci0: command tx timeout [ 130.795193] Bluetooth: hci1: command tx timeout [ 130.859216] Bluetooth: hci2: command tx timeout [ 130.922336] Bluetooth: hci3: command tx timeout [ 130.986136] Bluetooth: hci4: command tx timeout [ 131.050862] Bluetooth: hci5: command tx timeout [ 131.050910] Bluetooth: hci7: command tx timeout [ 131.114166] Bluetooth: hci6: command tx timeout [ 132.842336] Bluetooth: hci1: command tx timeout [ 132.842841] Bluetooth: hci0: command tx timeout [ 132.906164] Bluetooth: hci2: command tx timeout [ 132.970148] Bluetooth: hci3: command tx timeout [ 133.034234] Bluetooth: hci4: command tx timeout [ 133.098154] Bluetooth: hci5: command tx timeout [ 133.099147] Bluetooth: hci7: command tx timeout [ 133.163501] Bluetooth: hci6: command tx timeout [ 184.617560] syz-executor.1 (287) used greatest stack depth: 24640 bytes left [ 187.138209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.142993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.145848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.154692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.159246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.306502] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.311617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.314844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.320845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.322969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.330609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.330865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.334213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.347175] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.354334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.413625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.428106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.429963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.468972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.472274] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 187.481617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.485905] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.488369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.491030] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 187.493425] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.495427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.497001] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.499642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.501500] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.503150] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 187.508829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.510719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.512911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.527551] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.534238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.546208] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 187.550287] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 187.552819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.598154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.626804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.226679] Bluetooth: hci0: command tx timeout [ 189.418234] Bluetooth: hci1: command tx timeout [ 189.483468] Bluetooth: hci2: command tx timeout [ 189.610575] Bluetooth: hci3: command tx timeout [ 189.674820] Bluetooth: hci5: command tx timeout [ 189.676022] Bluetooth: hci7: command tx timeout [ 189.677345] Bluetooth: hci4: command tx timeout [ 189.738175] Bluetooth: hci6: command tx timeout [ 191.275175] Bluetooth: hci0: command tx timeout [ 191.467227] Bluetooth: hci1: command tx timeout [ 191.530153] Bluetooth: hci2: command tx timeout [ 191.658157] Bluetooth: hci3: command tx timeout [ 191.722333] Bluetooth: hci7: command tx timeout [ 191.723413] Bluetooth: hci4: command tx timeout [ 191.723830] Bluetooth: hci5: command tx timeout [ 191.787117] Bluetooth: hci6: command tx timeout [ 193.322126] Bluetooth: hci0: command tx timeout [ 193.515110] Bluetooth: hci1: command tx timeout [ 193.578319] Bluetooth: hci2: command tx timeout [ 193.706236] Bluetooth: hci3: command tx timeout [ 193.771315] Bluetooth: hci4: command tx timeout [ 193.771754] Bluetooth: hci5: command tx timeout [ 193.771836] Bluetooth: hci7: command tx timeout [ 193.834150] Bluetooth: hci6: command tx timeout [ 195.371484] Bluetooth: hci0: command tx timeout [ 195.563294] Bluetooth: hci1: command tx timeout [ 195.626345] Bluetooth: hci2: command tx timeout [ 195.756293] Bluetooth: hci3: command tx timeout [ 195.818137] Bluetooth: hci7: command tx timeout [ 195.820117] Bluetooth: hci4: command tx timeout [ 195.820228] Bluetooth: hci5: command tx timeout [ 195.883014] Bluetooth: hci6: command tx timeout [ 247.353651] syz-executor.5 (2973) used greatest stack depth: 24544 bytes left [ 249.544281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.548155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.551648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.559856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.564504] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.603420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.607837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.611996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.621782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.629016] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 249.812753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.865877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 249.866342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.868811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.876730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.876818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.879654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 249.884799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 249.889758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.894549] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.896632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.922539] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.926507] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.934572] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.975029] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.989621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.990286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.991805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.993286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.999002] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.003396] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.014959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.019573] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.101539] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.103326] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.113666] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.115360] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 250.175536] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 250.215320] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 250.226631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.628239] Bluetooth: hci0: command tx timeout [ 251.691030] Bluetooth: hci1: command tx timeout [ 251.946189] Bluetooth: hci3: command tx timeout [ 252.010193] Bluetooth: hci4: command tx timeout [ 252.075174] Bluetooth: hci2: command tx timeout [ 252.138210] Bluetooth: hci5: command tx timeout [ 252.458365] Bluetooth: hci6: command tx timeout [ 252.459304] Bluetooth: hci7: command tx timeout [ 253.674236] Bluetooth: hci0: command tx timeout [ 253.738263] Bluetooth: hci1: command tx timeout [ 253.994667] Bluetooth: hci3: command tx timeout [ 254.058588] Bluetooth: hci4: command tx timeout [ 254.122490] Bluetooth: hci2: command tx timeout [ 254.186362] Bluetooth: hci5: command tx timeout [ 254.506280] Bluetooth: hci6: command tx timeout [ 254.507259] Bluetooth: hci7: command tx timeout [ 255.722871] Bluetooth: hci0: command tx timeout [ 255.786180] Bluetooth: hci1: command tx timeout [ 256.042284] Bluetooth: hci3: command tx timeout [ 256.106563] Bluetooth: hci4: command tx timeout [ 256.171546] Bluetooth: hci2: command tx timeout [ 256.234597] Bluetooth: hci5: command tx timeout [ 256.555628] Bluetooth: hci6: command tx timeout [ 256.556661] Bluetooth: hci7: command tx timeout [ 257.771124] Bluetooth: hci0: command tx timeout [ 257.835157] Bluetooth: hci1: command tx timeout [ 258.090191] Bluetooth: hci3: command tx timeout [ 258.154173] Bluetooth: hci4: command tx timeout [ 258.219188] Bluetooth: hci2: command tx timeout [ 258.282537] Bluetooth: hci5: command tx timeout [ 258.602214] Bluetooth: hci6: command tx timeout [ 258.602974] Bluetooth: hci7: command tx timeout [ 311.869702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.873935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.876877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.886636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.892947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.186098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.192590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.199435] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.215936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.220988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.299318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.306430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.320725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.322470] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.329323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.333917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.338103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.340681] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 312.358522] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.377761] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.424273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.430225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.440682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.449962] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.458348] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.480775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.482581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.487230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.492536] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.493955] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.501183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.506499] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.536865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.552852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 312.554738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.566271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.594539] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 312.629766] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 312.660680] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 312.715243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.964292] Bluetooth: hci0: command tx timeout [ 314.283182] Bluetooth: hci1: command tx timeout [ 314.411424] Bluetooth: hci2: command tx timeout [ 314.538276] Bluetooth: hci3: command tx timeout [ 314.603852] Bluetooth: hci4: command tx timeout [ 314.666146] Bluetooth: hci6: command tx timeout [ 314.666175] Bluetooth: hci5: command tx timeout [ 314.794189] Bluetooth: hci7: command tx timeout [ 316.010333] Bluetooth: hci0: command tx timeout [ 316.330325] Bluetooth: hci1: command tx timeout [ 316.459106] Bluetooth: hci2: command tx timeout [ 316.587190] Bluetooth: hci3: command tx timeout [ 316.650288] Bluetooth: hci4: command tx timeout [ 316.714149] Bluetooth: hci5: command tx timeout [ 316.714606] Bluetooth: hci6: command tx timeout [ 316.843264] Bluetooth: hci7: command tx timeout [ 318.058788] Bluetooth: hci0: command tx timeout [ 318.379284] Bluetooth: hci1: command tx timeout [ 318.507290] Bluetooth: hci2: command tx timeout [ 318.634699] Bluetooth: hci3: command tx timeout [ 318.699332] Bluetooth: hci4: command tx timeout [ 318.762158] Bluetooth: hci6: command tx timeout [ 318.762181] Bluetooth: hci5: command tx timeout [ 318.892117] Bluetooth: hci7: command tx timeout [ 320.106391] Bluetooth: hci0: command tx timeout [ 320.426271] Bluetooth: hci1: command tx timeout [ 320.554121] Bluetooth: hci2: command tx timeout [ 320.682117] Bluetooth: hci3: command tx timeout [ 320.748091] Bluetooth: hci4: command tx timeout [ 320.810128] Bluetooth: hci6: command tx timeout [ 320.811393] Bluetooth: hci5: command tx timeout [ 320.939137] Bluetooth: hci7: command tx timeout [ 374.275736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.284662] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.289587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.295867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.302417] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.306015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.307875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.318803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.321027] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.326437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.472637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.475925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.478270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.484646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.491172] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.548862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.555713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.558887] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.566276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.571531] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.655879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.664814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.677710] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.698313] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.719515] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 374.721882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.725171] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 374.727947] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.730448] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.732604] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 374.742862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 374.757640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.773597] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 374.783560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 374.799768] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 374.801698] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 374.809990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 374.814262] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.831361] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 374.877595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 376.362156] Bluetooth: hci1: command tx timeout [ 376.426347] Bluetooth: hci0: command tx timeout [ 376.554311] Bluetooth: hci2: command tx timeout [ 376.683185] Bluetooth: hci3: command tx timeout [ 376.875169] Bluetooth: hci4: command tx timeout [ 376.875189] Bluetooth: hci5: command tx timeout [ 376.938170] Bluetooth: hci7: command tx timeout [ 377.066143] Bluetooth: hci6: command tx timeout [ 378.410705] Bluetooth: hci1: command tx timeout [ 378.474377] Bluetooth: hci0: command tx timeout [ 378.602825] Bluetooth: hci2: command tx timeout [ 378.730276] Bluetooth: hci3: command tx timeout [ 378.922123] Bluetooth: hci5: command tx timeout [ 378.925129] Bluetooth: hci4: command tx timeout [ 378.986276] Bluetooth: hci7: command tx timeout [ 379.114664] Bluetooth: hci6: command tx timeout [ 380.458149] Bluetooth: hci1: command tx timeout [ 380.523078] Bluetooth: hci0: command tx timeout [ 380.650280] Bluetooth: hci2: command tx timeout [ 380.778138] Bluetooth: hci3: command tx timeout [ 380.970322] Bluetooth: hci4: command tx timeout [ 380.970845] Bluetooth: hci5: command tx timeout [ 381.035576] Bluetooth: hci7: command tx timeout [ 381.162306] Bluetooth: hci6: command tx timeout [ 382.506304] Bluetooth: hci1: command tx timeout [ 382.571106] Bluetooth: hci0: command tx timeout [ 382.699350] Bluetooth: hci2: command tx timeout [ 382.827075] Bluetooth: hci3: command tx timeout [ 383.018369] Bluetooth: hci5: command tx timeout [ 383.019361] Bluetooth: hci4: command tx timeout [ 383.082249] Bluetooth: hci7: command tx timeout [ 383.211340] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 06:07:24 Registers: info registers vcpu 0 RAX=00007f9e6beea000 RBX=ffff88802b5f79b0 RCX=ffffffff81a4a46e RDX=ffff88801a178000 RSI=00007f9e6befa000 RDI=0000000000000006 RBP=ffff888033ccb280 RSP=ffff88802b5f77f0 R8 =0000000000000001 R9 =ffffed1002d06641 R10=00007f9e6beea000 R11=0000000000000001 R12=ffff88800ef98140 R13=ffff88802b5f79c8 R14=00007f9e6befa000 R15=ffff88802b5f79c0 RIP=ffffffff81a4a472 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e562f000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9e6c3e71f0 CR3=000000002610b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=28bf466d6b1a16f4 RDX=ffffffff81353d19 RSI=000000001ddcb409 RDI=000000008deceed9 RBP=ffff888017fd7870 RSP=ffff888017fd77a8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffff888017fd7860 R14=ffff888033c19b80 R15=ffff888017fd7818 RIP=ffffffff81353d33 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e572f000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f907acd3028 CR3=000000000ae30000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000